Defining Acl - Huawei Quidway S3500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
Note:
During user-defining flow-template configuration, if you configured any of the three
parameters: dport, sport or tcp-flag, you must configure the ip-protocol parameter at the
same time. Otherwise, the flow template fails to operate.
If you need to define the rule of layer 2 ACL by using parameter tagged or untagged,
you are required to configure the ethernet-protocol parameter in self-defining
flow-template configuration.
You cannot modify or delete the default flow template.
II. Applying Flow Template
Please perform the following configurations in VLAN view to apply the user-defined
flow template to current port or current VLAN.
Table 1-22 Applying Flow Template
Apply the user-defined flow template to
current port or current VLAN
cancel the applied flow template on
current port or current VLAN
Applying the flow template has following limitation:
The template includes user-defined template and the template automatic created
by switch
Switch only can have up to 2 templates.
Switch can only have one user-defined flow template
Switch can have up to 2 automatic created flow templates: one layer 2 flow
template and one layer 3 flow template. If no corresponding user-defined ACL is
defined, switch can not apply layer 2 ACL rules and layer 3 ACL rules
If switch only apply layer 2 ACL rules on a port and does not apply flow template
on the port first, a layer 2 automatic flow template will be applied on the port
automatically. So does layer 3 ACL rules.

1.4.3 Defining ACL

Huawei Switches support several kinds of ACLs. Here we will introduce how to define
these ACLs.
Defining ACL by following the steps below:
1) enter the corresponding ACL view
2) add a rule to the ACL
Operation
Huawei Technologies Proprietary
1-20
Chapter 1 ACL Configuration
Command
flow-template user-defined
undo flow-template user-defined